Privacy Policy

What we collect

• Account details — your name, email address, and a password stored only as a salted hash (we never see your password).
• Study content — your conversations, questions asked, practice answers, written reasoning, bookmarks, course progress, and the results generated for you.
• Usage and billing records — which AI features you used, the computed cost of each call (used to enforce your budget), your subscription status and periods, and a record of payments received (amount, currency, and the payment provider’s transaction reference).
• Technical data — server logs containing IP address, timestamps, and request details, kept for security and debugging.
• Usage analytics — which pages are viewed, which features are used, interface interactions (clicks and taps), performance measurements, and session recordings of how the interface is used. In recordings, everything you type and the content of your questions, answers, and study material is masked before it leaves your browser — we see the shape of a session, not your words. All of it is tied to a pseudonymous account identifier plus your role and subscription tier, never to your email or name.
• Error reports — when something breaks, we receive the technical error: what failed, on which page or endpoint, and in which browser. Never the content of the request.

We do not collect health data about you or anyone else, and you should not enter personal health information — yours or anyone else’s — into the Service.

Why we use it, and on what basis

• To provide the Service you asked for — answering your questions, storing your history, tracking course progress (performance of our contract with you).
• To meter usage against your budget, take payment, and prevent abuse (performance of contract, and our legitimate interest in running the Service sustainably).
• To keep the Service secure and diagnose faults (legitimate interest).
• To meet accounting and tax obligations (legal obligation).

Who we share it with

We use a small number of processors, and only what they need:

• Google (Gemini API) — receives the text of your questions and the retrieved study passages in order to generate answers. Google processes this as our provider under its API terms, which state that it is not used to train its models.
• Paddle — our payment processor and merchant of record. When you buy a subscription you deal with Paddle directly: it collects your payment and billing details under its own privacy policy, and returns to us only a customer reference, transaction id, amount, and status. Your card details never reach our servers.
• Our hosting — the database and file storage that run the Service, which we operate ourselves on rented infrastructure.
• PostHog — our product-analytics and monitoring provider, hosted in the EU. It receives usage events, masked session recordings, performance measurements, and error reports tagged with a pseudonymous identifier so we can see what is used, what is confusing, and what is broken. It never receives the content of your questions or answers, your email, or your name.

We do not share your data with anyone else, except where the law requires it or to establish or defend legal claims. Because these providers operate internationally, your data may be processed outside your country; where required, transfers rely on the providers’ standard contractual clauses.

Cookies and local storage

Med Guru Pre-Med stores two things in your browser: a strictly-necessary httpOnly session cookie that keeps you signed in, and a first-party analytics identifier (in local storage and a cookie) that lets our analytics tell visits apart. The analytics identifier is set by us for our own product analytics only — there are no advertising or cross-site tracking cookies, and nothing follows you to other sites. If you would like it removed, clearing your browser data for premed.med-guru.com deletes it, or email us and we will exclude your account. Paddle’s checkout may set its own cookies when you make a purchase, governed by Paddle’s policy.

How long we keep it

• Account and study content: until you delete your account, or ask us to delete it.
• Payment records: as long as accounting and tax law requires, typically several years, even after account deletion.
• Server logs: a short rolling window for security and debugging.
• Analytics events and error reports: a limited period on our analytics provider; session recordings are automatically deleted after roughly a month.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to its processing, or provide it in a portable form. Email support@med-guru.com and we will respond within 30 days. Deleting your account removes your study content and personal details; it does not remove payment records we must retain by law. If you are in the EU/UK and believe we have mishandled your data, you may also complain to your local data protection authority.

Security

Passwords are stored hashed, sessions use httpOnly cookies, access to study material requires an authenticated request, and administrative functions are restricted to administrator accounts. No system is perfectly secure; if a breach affects your data, we will notify you and any regulator as required.

Children

The Service is intended for pre-med students and is not directed at children. We do not knowingly collect data from anyone under 16; if you believe a child has given us data, contact us and we will delete it.

Changes

If this policy changes materially we will notify you by email or in the app before the change takes effect.